The Cybereason GSOC observed a spike in infections using the Snake malware in late August 2021 with no specific trend in the industry or the geographical locations of the targeted victims. No industry or geographical preferences: Snake has been present in the threat landscape since November 2020 and has been a constant threat to users’ privacy and security since then.Snake can exfiltrate stolen data through a variety of protocols, such as FTP, Simple Mail Transfer Protocol (SMTP), and Telegram. Snake can steal credentials from over 50 applications, which include File Transfer Protocol (FTP) clients, email clients, communication platforms, and web browsers. Snake has keystroke logging as well as clipboard data, screenshot, and credential theft capabilities. Serious threat to privacy and security: Snake is a feature-rich information-stealing malware.This report provides an overview of key information-stealing features of the Snake malware and discusses similarities that we discovered in the staging mechanisms of samples from Snake and two common information-stealing malware programs, FormBook and Agent Tesla. In this Threat Analysis report, the GSOC investigates Snake, a feature-rich information-stealing malware. The Threat Analysis reports investigate these threats and provide practical recommendations for protecting against them.
The Cybereason Global Security Operations Center (GSOC) issues Cybereason Threat Analysis reports to inform on impacting threats.
0 kommentar(er)
